The corona virus has reached our everyday life. The pandemic is directing our focus on what is now the most important thing: the protection of the health, safety and well-being of our employees, our partners, customers and families.
The vast majority of our employees use the opportunity to work from home; some are available at the locations to sign, receive mail and much more.
In the relatively short period of time it has already become apparent that the staff of SRC is very committed to ensure the continuity of the operational processes.
Especially in these difficult times, we pay special attention to the concerns of our customers. We are still in a position to support our customers, some of whom operate urgently needed critical infrastructures, comprehensively and with a maximum of flexibility. We will continue to meet our great responsibility and obligation towards our customers in these times.
Even if many of us are not at the SRC locations: We are still available for you via the usual communication channels.
We continue to do what we are good at.
As an alternative to on-site appointments we have, for example, developed procedures for remote support. We can …
- conduct consultations and interviews in the form of telephone conferences,
- Check system settings using web conferences,
- Carry out on-site inspections using video transmissions.
Please contact your contact person at SRC in order to coordinate the concrete procedure.
We at SRC are convinced that we will learn from the experiences of this situation for our future. We will emerge strengthened from this crisis.
Please pay attention to the health of your fellow men and families.
Despite Corona — the support of SRC is certain!
/in News-EN /by Jochen SchumacherThe corona virus has reached our everyday life. The pandemic is directing our focus on what is now the most important thing: the protection of the health, safety and well-being of our employees, our partners, customers and families.
The vast majority of our employees use the opportunity to work from home; some are available at the locations to sign, receive mail and much more.
In the relatively short period of time it has already become apparent that the staff of SRC is very committed to ensure the continuity of the operational processes.
Especially in these difficult times, we pay special attention to the concerns of our customers. We are still in a position to support our customers, some of whom operate urgently needed critical infrastructures, comprehensively and with a maximum of flexibility. We will continue to meet our great responsibility and obligation towards our customers in these times.
Even if many of us are not at the SRC locations: We are still available for you via the usual communication channels.
We continue to do what we are good at.
As an alternative to on-site appointments we have, for example, developed procedures for remote support. We can …
Please contact your contact person at SRC in order to coordinate the concrete procedure.
We at SRC are convinced that we will learn from the experiences of this situation for our future. We will emerge strengthened from this crisis.
Please pay attention to the health of your fellow men and families.
Payment 2030 — The study on the future of payment in Germany
/in News-EN /by Jochen SchumacherWith the support of Z_Punkt — The Foresight Company, SRC has prepared the study Payment 2030. This study deals with the future of payment in Germany. It is the continuation of the study on Payment 2025 initiated in 2015. Besides updating the scenarios considered in 2015, the study primarily examines options for action for account-holding institutions that arise with regard to the payment process of the future. The basis for this is a comprehensive analysis of the trends and developments already emerging today.
The study Payment 2030 addresses many questions: In what way have the relevant framework conditions changed compared to the previous study? How can account-holding institutions react to new market participants? What do innovative solutions in payment traffic look like? What new revenue sources and value-added services are conceivable? And what opportunities and necessities for cooperation with partners within and outside the banking industry will arise in order to be prepared for “Payments 2030”?
Numerous experts from the banking industry, retail and technology providers were involved in the preparation of the study. In this way, the horizon of the study was broadened and a broad spectrum of potential developments was covered.
SRC provides you with the study Payment 2030 free of charge. Please understand the study as an invitation for dialogue. Therefore, we are looking forward to your comments, questions and suggestions. Please write to us at bezahlen2030@src-gmbh.de.
The study is available for download free of charge in German and English. Print copies are only available in German. They can be requested free of charge by stating the shipping address.
Transfer- und Perspektivworkshops
This workshop is a joint offer by SRC Security Research & Consulting and Z_punkt The Foresight Company.
SRC recognized by PCI SSC as SPoC and CPcC Security Lab
/in News-EN, PCI-en, Uncategorized /by Jochen SchumacherToday, the worldwide operating PCI Security Standards Council has recognized SRC as the fourth laboratory for the performance of security tests for SPoC and CPoC solutions.
With SPoC solutions (Secure PIN Entry on Commercial-off-the-Shelf devices) a merchant can accept payments with commercially available mobile devices.
While the SPoC program describes solutions with PIN entry, the CPoC program is aimed exclusively at contactless solutions that do not require PIN entry.
A SPoC solution consists of four core components
With CPoC, the PCI SSC has developed requirements for solutions for processing contactless payments without PIN entry (“Tap and Go”) on commercially available mobile devices (commercial off-the-shelf, COTS), such as smartphones or other mobile commercial off-the-shelf (COTS) devices with NFC interface.
With the SPoC and CPoC programs, the PCI SSC meets the increasing demand for new and secure acceptance solutions and ensures security in the acceptance of payments via mobile phones and tablets. The corresponding tests are now also carried out by SRC.
The recognition of SRC as a lab for the programmes SPoC and CPoC is an important signal to the market. Customers from this innovative environment can now also make use of SRC’s expertise for the development of secure payment solutions.
PCI DSS best practices guidance for large organizations published
/in News-EN, PCI-en /by Jochen SchumacherSRC Security Research & Consulting GmbH contributed to the most recent PCI (Payment Card Industry) Security Standards Council Special Interest Group (SIG). The resulting guidance on PCI DSS for Large Organizations is now published.
Complex organizations, corporations and companies often face specific challenges when implementing PCI DSS (Payment Card Industry Data Security Standard) requirements: the heterogeneity of their infrastructures and processes, the constant change of corporate structures, and dealing with diverse requirements, responsibilities and management tasks.
The new guidance on PCI DSS for Large Organizations helps large and/or complex organizations coordinate and manage their PCI DSS activities across multiple environments.
SRC is partner of OMNISECURE 2020
/in News-EN /by Jochen SchumacherAs experts for IT security, we at SRC know that levels of protection are essential in the digitalization of industry and society. The experts from the industry will present the security concepts required for this at the annual OMNISECURE. As a partner of OMNISECURE, SRC traditionally enriches the discourse on these topics with the knowledge we have gathered in many projects. The OMNISECURE will take place in Berlin from 20 — 22 January 2020.
Electronic identification and the security required for it are one of the overarching topics at SRC and at the same time the core topic of the event. For SRC, the OMNISECURE provides an important platform for the cross-industry exchange of knowledge and experience with experts, specialists and executives from business, politics, public administration and science.
As a partner of OMNISECURE, SRC makes its contribution to provide participants with a comprehensive overview of new applications, hazards and solutions, technology trends, progress or delays in well-known, trend-setting projects. Ideas and relevant legislative projects are discussed in the same way as failures, from which one can always learn. The OMNISECURE offers a wealth of food for thought and encounters with renowned experts. It is not unusual for the foundation stones for future projects and decisions to be laid here.
We at SRC are looking forward to two rich days and to the varied and rich discussions with experts and customers.
Certificate Course “Information Security Officer for Credit Institutions” — May 5 to 8, 2020
/in Compliance within banks, News-EN /by Jochen SchumacherThe German Banking Act (KWG) and MaRisk require banks to ensure the integrity, availability, authenticity and confidentiality of data in their IT systems and processes. But secure and efficient IT is also essential for the economic success of a bank.
The new “Banking Supervision Requirements for IT” (BAIT) formulate concrete expectations. Among other things, the Federal Financial Supervisory Authority (BaFin) has issued a guideline calling for the new function of the “Information Security Officer ” to be set up. He or she controls the information security process and reports directly to the management.
In cooperation with Bank-Verlag, SRC has already successfully completed six certificate courses for the “Information Security Officer (ISB) for credit institutions”. After the great response and the continuing demand, we are pleased that the Bank-Verlag has made another date possible for this four-day certificate course.
From 5 to 8 May 2020, you will once again have the opportunity of further training in Cologne to become an “Information Security Officer (ISB) for credit institutions”.
In a team with Heinrich Lottmann (TARGOBANK AG & Co. KGaA) and Alexandros Manakos (HSBC Trinkaus & Burkhardt AG) the SRC experts Dagmar Schoppe, Florian Schumann and Randolf Skerka will give a lecture on the norms and standards according to ISO and IT-Grundschutz, as well as on all legal/regulatory requirements relevant for you as an ISB. In addition, the topics IT Risks and Contingency Management as well as Business Continuity Management will be discussed.
After passing the final examination, you will receive the certificate “Information Security Officer for Credit Institutions”.
On 4 May 2020 you will also have the optional opportunity to acquire the basic IT knowledge required for the course in a one-day intensive seminar in Cologne prior to the event. This course deals with basics, terms, encryption and IT security techniques in information technology.
SRC recognised as SBMP Evaluation Laboratory by EMVCo
/in News-EN /by Vanessa WeberMobile Payments: From chip card to mobile device
Mobile Payment is an electronic form of payment using mobile devices such as mobile phones, tablets or smartwatches. Electromagnetic, i.e. contactless, techniques are used to initiate, authorise and realise the payment. This makes the security of this form of payment a challenge.
EMVCo and Software-Based Mobile Payment (SBMP) Programme
EMVCo, which defines and further develops the EMV standard and checks its implementation, addresses these challenges with its new SBPM approval process. SBPM stands for Software-Based Mobile Payment Evaluation Process. This evaluation examines whether the security mechanisms and protective measures of a component or solution have the minimum security level defined by EMVCo. Manufacturers are certified with a security assessment certificate that their products can withstand known attacks.
With the SBPM approval process, EMVCo supports the global security and interoperability of mobile payment transactions. The range of security assessment processes has so far included products for integrated circuits (IC), platforms and integrated circuits (ICC). For the first time, EMVCo has extended the scope of its approval processes to include software components and solutions for mobile payments.
EMVCo recognises SRC as SBPM Evaluation Laboratory
SRC is recognized by EMVCo as a security lab/assessor for the security assessment of software-based mobile payment solutions and components, in addition to the existing Mastercard and Visa recognitions.
SRC performs comprehensive checks of the security mechanisms of a Mobile Payment App or its components. The implemented measures are examined using state-of-the-art methods, such as reverse engineering, side channel and runtime analyses, and their resilience/resistance to attackers and protection against misuse is evaluated.
If you are interested in further information on the subject or the evaluation of your payment solution, please contact us.
Unternehmenstag 2019 — SRC participates again!
/in career, News-EN /by Vanessa WeberUnternehmenstag 2019 — The Career Fair for Students and Career Starters
The end of the studies is in sight. The degree is within reach. At the latest now, students and graduates need contact to their future employer. SRC is looking forward to this contact. Two days at the University of Applied Sciences Bonn Rhein-Sieg on the campus in Sankt Augustin. This is where the Unternehmenstag 2019 takes place on 13 and 14 November.
The job fair will be rounded off with a wide range of offers relating to careers and career planning. These include lectures, application photos, job boards and much more.
Career in IT — SRC provides an insight into exciting areas of responsibility
SRC will also be happy to give students and graduates the opportunity to gain an insight into and exchange views on the diverse topics of IT security at the Unternehmenstag 2019. The SRC experts will explain everyday life and the challenges in the assessment of security-relevant IT technologies. A selection of current topics are, for example, mobile payment methods, artificial intelligence and critical infrastructures. We expect our new colleagues to have a strong instinct for potential sources of error in complex technologies, the competence to find solutions and the assertiveness to represent the results of their work to clients.
Current job offers on our career portal
Whether as a working student in our customer management or as a scanworker in the pentest team — completing diverse and exciting tasks while studying is no problem for us. But also graduates will get what they are looking for — we are looking for pentesters, consultants and analysts for different areas in our company.
Students and graduates are welcome to inform themselves in advance on our career portal about vacancies at our company. We will be happy to answer any questions you may have at the Unternehmenstag! You also have the option of submitting your application documents directly to us on site.
SRC invited to inova 2019
/in career, News-EN /by Vanessa WeberSRC introduces the company at the career forum at TU Ilmenau
The inova will take place in October 2019 at the TU Ilmenau in Thueringen. Within the last 20 years, inovailmenau has become one of the most important career forums in Germany. Exclusively selected companies can engage in direct dialogue with students and establish contacts. As a selected company, SRC GmbH will be on site in central Germany and will offer interested students an insight into the diverse topics of an IT security company and the corresponding career opportunities.
Career in IT? Not only as the ” classical ” computer scientists
Frequently, you meet unsettled students when it comes to “what you want to do with your concrete degree in the future”. Certain occupations in certain sectors, such as IT, struggle with the prejudice of only hosting and hiring the ” classical ” computer scientists. However, this is not the case in our industry.
SRC uses inova 2019 to give students at the TU Ilmenau, whose courses of study are strongly characterised by engineering science, an insight into and an exchange on the diverse subject areas of IT security. The SRC experts explain the challenges of technology assessment using examples such as mobile payment methods, artificial intelligence and similar topics. This requires a strong instinct for potential sources of error in complex environments, the competence to find solutions and the will to implement them. Especially students with engineering, economic, mathematical and scientific backgrounds bring these valuable qualities with them.
The inovailmenau 2019
This year’s inovailmenau will take place at the TU Ilmenau from 22 to 23 October 2019, from 10 am to 4 pm. With over 5200 visitors, the inovailmenau is the most important student career forum in central Germany. The number of interested companies is constantly growing, giving the inova team the opportunity to exclusively handpick companies. We at SRC GmbH are therefore particularly pleased to be able to personally get in touch with the students of the TU Ilmenau in October and to inspire them with our company and career opportunities. You are welcome to browse through our topics and our career portal in advance — we will be happy to answer any questions in a personal dialogue on site or in advance via our numerous contact options.
SRC at ICPS 2019 in dialogue with physics students
/in News-EN /by Vanessa WeberSRC attends the ICPS 2019 Jobfair
Physics students will meet for the 34th time at ICPS 2019 in Cologne. The “Jobfair” taking place on Tuesday, August 13, 2019, will provide the setting.
SRC uses the ICPS 2019 to provide physicists with insights into and an exchange on the diverse topics of IT security. The SRC experts explain the challenges of technology assessment using examples such as mobile payment methods, artificial intelligence and similar topics. This requires a strong instinct for potential sources of error in complex environments, the competence to find solutions and the will to implement them. Especially students with a physical background bring these valuable qualities with them. Dr. Max Hettrich already reported in the interview “From quantum physicist to security analyst at SRC” on how a career can develop from these qualities.
By students for students — The ICPS 2019
The ICPS finds a new home every year. More than 500 physics students and doctoral candidates from more than 50 nations not only have the opportunity to exchange their knowledge; they also get to know the culture and mentality of the host country. The ICPS is organised by the respective student associations of the host country. This year, the organisation team consisting of members of the young German Physical Society, the Institute for Theoretical Physics of the University of Cologne and the Bonn-Cologne Graduate School of Physics and Astronomy who have prepared a programme that will last 8 days.
Matthias Dahlmanns is the project coordinator of ICPS 2019 and a working student at SRC. “Coordinating the organisation of the ICPS 2019 is a great experience. The participation of SRC makes me personally very happy”, says Matthias Dahlmanns. Dr. Benjamin Botermann, Senior Consultant Test & Quality Assurance, is also looking forward to the exchange with the many interested physics students: “I am very excited about the ICPS Jobfair. As a physicist, I find myself absolutely at home working at SRC. I am looking forward to the exchange with the prospective physicists. In a personal conversation, I would like to talk about the various fields of activity at SRC and answer the numerous and detailed questions”.